Privacy Policy

Effective date: September 22, 2026

PDR Shop Pro ("we," "us," or "our") operates the PDR Shop Pro web application and mobile app (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information.

1. Information We Collect

We collect information you provide directly when you create an account or use the Service:

Account information: name, email address, phone number, role within your shop.
Shop information: business name, address, logo, and configuration settings.
Customer and vehicle data: names, phone numbers, addresses, VINs, and vehicle details entered by your shop to manage repair work orders.
Work order data: job details, photos, repair notes, expense records, and commission calculations.
Payment information: billing is processed by Stripe. We do not store credit card numbers. We receive subscription status, last-four digits, and billing history from Stripe.
Location data: GPS coordinates may be captured when creating leads or pins in the field, with your explicit consent.
Photos: vehicle photos uploaded to work orders are stored on our servers.
Usage data: pages visited, actions taken, and error logs, used to operate and improve the Service.

2. How We Use Your Information

To provide, operate, and maintain the Service.
To process payments and manage subscriptions through Stripe.
To send SMS notifications to shop staff (status updates, appointment reminders) via Twilio — only to users who have not opted out.
To send automated review request SMS messages to customers who have opted in.
To generate PDFs (invoices, pay stubs, rental agreements) on your behalf.
To decode vehicle information via the NHTSA API using VINs you provide.
To provide AI-assisted features (VIN scanning via OpenAI Vision, in-app help chat via Anthropic Claude) — only the minimum data needed is sent to these providers.
To contact you about your account, support requests, or material changes to this policy.

3. Data Sharing

We do not sell your data. We share information only with the following service providers as necessary to operate the Service:

Stripe — payment processing and subscription management (stripe.com/privacy)
Twilio — SMS delivery for staff and customer notifications (twilio.com/legal/privacy)
OpenAI — VIN photo extraction (image data only, not stored by OpenAI per their data usage policy)
Anthropic — in-app help chat (conversation text only, not stored beyond the session)
NHTSA — vehicle data lookup by VIN (public API, no personal data sent)
Amazon Web Services (S3) — database backup storage

We may disclose information if required by law or to protect the rights, property, or safety of PDR Shop Pro, its users, or the public.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you cancel your subscription, your data is retained for 90 days to allow for reactivation, after which it may be deleted. You may request earlier deletion by contacting us.

5. Security

We use industry-standard measures to protect your data, including HTTPS encryption in transit, hashed passwords, and access controls. No system is completely secure; we encourage you to use a strong, unique password.

6. Your Rights

You may:

Access or update your account information through the Settings page.
Request a copy of your data or deletion of your account by emailing us.
Opt out of SMS notifications at any time by replying STOP to any message.
Opt customers out of automated review request SMS messages in the work order settings.

7. Children's Privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy at this URL and, where appropriate, by email. Your continued use of the Service after the effective date constitutes acceptance.

9. European Users & GDPR

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, this section applies to you in addition to the rest of this Privacy Policy.

Legal basis for processing

We process your personal data on the following legal bases:

Contract performance — processing your account information, work order data, and payment information is necessary to provide the Service you have subscribed to.
Legitimate interests — usage logs, error tracking, and platform analytics are processed to operate, secure, and improve the Service. Our legitimate interests do not override your fundamental rights.
Consent — GPS location capture for lead pins is processed only with your explicit consent, which you may withdraw at any time.
Legal obligation — we may retain certain data where required by applicable law.

International data transfers

PDR Shop Pro is operated from the United States. If you are located in the EEA, UK, or Switzerland, your personal data will be transferred to and processed in the United States. We rely on the following safeguards for these transfers:

Stripe and Amazon Web Services (S3) cover EU data transfers under Standard Contractual Clauses (SCCs) approved by the European Commission.
Twilio and Anthropic also maintain SCCs for the transfer of EU personal data to the United States.
OpenAI processes only VIN photo data for vehicle lookup and maintains SCCs for EU transfers.

Additional rights for EEA and UK users

In addition to the rights described in Section 6, you also have the right to:

Restriction of processing — request that we limit processing of your data while a dispute is resolved.
Data portability — receive a copy of your personal data in a structured, machine-readable format.
Object to processing — object to processing carried out on the basis of our legitimate interests.
Lodge a complaint — you have the right to lodge a complaint with your local supervisory authority. EU residents can find their national authority at edpb.europa.eu. UK residents may contact the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at support@pdrshoppro.com. We will respond within 30 days.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

PDR Shop Pro
support@pdrshoppro.com
Abilene, TX